Vulnerability in Pedestal Software Integrity Protection Driver
CVE-2003-1246
NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on \winnt\system32\drivers using the subst command.
EPSS: 0.003 (25.8th percentile) — read the EPSS interpretation.
Affected products
- Pedestal_software Integrity_protection_driver — versions 1.2, 1.3
- N/a — versions n/a
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_XF)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)